This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa
File:                     3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa (raw, json)
Hash identifier:          0nR+a0GrELpeQDM3LuDxE+qTaXatthUlw07SHUwh/Ys=
Subject key identifier:   34:9D:0D:84:A1:0E:1C:AE:C8:F5:20:1F:C2:1B:44:2F:9A:CA:67:CD
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       6DB723696FF912BFD032E672F1500E9476CA87DE
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa
Signing time:             Mon 26 Jan 2026 01:35:22 +0000
ROA not before:           Mon 26 Jan 2026 01:30:22 +0000
ROA not after:            Mon 25 Jan 2027 01:35:22 +0000
asID:                     137330
IP address blocks:        103.112.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b7:23:69:6f:f9:12:bf:d0:32:e6:72:f1:50:0e:94:76:ca:87:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Jan 26 01:30:22 2026 GMT
            Not After : Jan 25 01:35:22 2027 GMT
        Subject: CN=349D0D84A10E1CAEC8F5201FC21B442F9ACA67CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:2d:e0:33:4c:72:2c:24:64:a1:09:fc:e5:
                    d3:da:f3:0c:a9:59:9f:52:7d:07:cc:ee:32:9b:cb:
                    8e:4c:88:3f:e7:26:e2:cc:50:3b:b2:4a:fc:ca:4c:
                    80:c1:ad:1f:8b:9a:c8:5a:4b:02:d3:fc:84:01:dd:
                    7c:eb:58:23:e9:a5:4a:c6:dd:8c:68:9b:c7:41:dd:
                    0d:ee:26:ba:e3:13:44:8d:1a:fc:6d:bf:b7:8b:84:
                    5f:a0:01:6d:76:ca:86:7a:dc:6b:ef:89:ef:8d:1a:
                    bb:e7:ee:ab:5e:04:ef:f9:3a:43:15:53:45:7f:f8:
                    10:a5:28:80:5f:7d:48:4f:d0:96:77:ca:02:47:ef:
                    97:89:72:42:08:e4:3d:60:92:da:21:23:2d:9b:d7:
                    44:b9:e4:02:36:70:ea:72:19:b4:d1:43:37:36:90:
                    02:49:27:c4:ea:78:9d:33:da:0e:11:6f:eb:7c:47:
                    11:e3:bf:44:a0:e0:52:4a:11:94:8b:63:f4:54:a2:
                    cf:f6:83:c0:62:ab:7e:63:80:39:88:e7:da:be:04:
                    0b:be:b6:61:ca:9a:78:88:7b:26:62:1d:0e:ed:eb:
                    a0:6f:2b:80:0e:9a:18:79:fc:9d:5f:d3:a5:1d:12:
                    9b:5c:bd:a9:8f:30:c0:05:40:86:db:92:3d:e4:ff:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:0D:84:A1:0E:1C:AE:C8:F5:20:1F:C2:1B:44:2F:9A:CA:67:CD
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3234203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:a3:0f:e7:aa:55:6b:1a:6c:ad:62:8a:0a:2c:c7:b5:79:
         af:be:d7:4c:ee:b5:cd:d0:c8:75:06:d3:b5:fa:f7:24:b2:af:
         27:67:09:37:2d:91:f8:a9:f3:32:12:26:3f:03:17:47:13:60:
         a8:3b:9b:6b:ee:dc:3d:88:35:26:07:4a:c4:75:b4:70:52:4c:
         d3:6e:95:8f:a2:14:38:34:fb:02:2b:e3:60:c4:e6:a2:f6:4e:
         95:a8:43:36:4b:9c:d8:ef:e9:68:bf:00:7d:8f:ef:52:ee:56:
         62:52:6d:35:9b:ce:17:4f:9e:c0:40:c1:8e:75:7a:5c:cd:ad:
         2f:70:07:e8:45:50:41:e0:80:be:cf:be:2c:0f:8b:32:98:16:
         81:62:9c:29:da:00:af:ea:4a:f3:46:42:5a:0c:ca:41:07:59:
         ca:34:3d:9b:22:81:d5:98:d8:e6:af:ae:a7:1f:a2:27:03:bb:
         0e:22:1f:d1:05:03:f6:06:cf:b3:b2:eb:78:65:3e:52:6a:3b:
         fd:bf:50:77:c2:d2:b5:1b:c6:ba:30:8e:e8:8f:80:d4:32:0d:
         d0:3f:30:94:0f:5e:ef:69:ed:3c:7b:2e:d1:a0:dc:94:9d:15:
         72:24:48:1c:c4:f1:ef:f9:90:4e:ea:2c:3e:9e:b4:a6:da:87:
         5a:f3:99:47
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbbcjaW/5Er/QMuZy8VAOlHbKh94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yNjAxMjYwMTMwMjJaFw0yNzAxMjUwMTM1MjJaMDMxMTAvBgNV
BAMTKDM0OUQwRDg0QTEwRTFDQUVDOEY1MjAxRkMyMUI0NDJGOUFDQTY3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7i3gM0xyLCRkoQn85dPa8wyp
WZ9SfQfM7jKby45MiD/nJuLMUDuySvzKTIDBrR+LmshaSwLT/IQB3XzrWCPppUrG
3Yxom8dB3Q3uJrrjE0SNGvxtv7eLhF+gAW12yoZ63Gvvie+NGrvn7qteBO/5OkMV
U0V/+BClKIBffUhP0JZ3ygJH75eJckII5D1gktohIy2b10S55AI2cOpyGbTRQzc2
kAJJJ8TqeJ0z2g4Rb+t8RxHjv0Sg4FJKEZSLY/RUos/2g8Biq35jgDmI59q+BAu+
tmHKmniIeyZiHQ7t66BvK4AOmhh5/J1f06UdEptcvamPMMAFQIbbkj3k/zuLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUNJ0NhKEOHK7I9SAfwhtEL5rKZ80wHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04
N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFncIgwDQYJ
KoZIhvcNAQELBQADggEBAD0Jow/nqlVrGmytYooKLMe1ea++10zutc3QyHUG07X6
9ySyrydnCTctkfip8zISJj8DF0cTYKg7m2vu3D2INSYHSsR1tHBSTNNulY+iFDg0
+wIr42DE5qL2TpWoQzZLnNjv6Wi/AH2P71LuVmJSbTWbzhdPnsBAwY51elzNrS9w
B+hFUEHggL7PviwPizKYFoFinCnaAK/qSvNGQloMykEHWco0PZsigdWY2Oavrqcf
oicDuw4iH9EFA/YGz7Oy63hlPlJqO/2/UHfC0rUbxrowjuiPgNQyDdA/MJQPXu9p
7Tx7LtGg3JSdFXIkSBzE8e/5kE7qLD6etKbah1rzmUc=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:43:11 2026 by rpki-client